Add metadata NAT helper

This is a short lived hack for the Folsom release, to be replaced
by authenticated proxies in Grizzly.

Signed-off-by: Stephen Gran <steve@lobefin.net>